IPOffice and APN issue

[avaduardo]

Do you have idea why observed message in a monitor log of APN issue?

2023-06-20T14:28:52 14284mS HTTP: HTTPAPNPAuthorizationSessionIO: SetState Extract Access token
2023-06-20T14:28:52 14285mS HTTP: 35.186.220.2(443)-(4105) HTTPSession: Operational
2023-06-20T14:28:52 14290mS ERR: TLS:Certificate not in Certificate Store Src=192.168.53.10:4105 Dst=35.186.220.2:443
2023-06-20T14:28:52 14290mS SD: {"severity":"WARNING","message":"Jun 20, 2023 14:28:52 1002A01685/st2nLAB:>> TLS:Certificate not in Certificate Store, Src 192.168.53.10:4105 Dst 35.186.220.2:443","distributor":"UNINET-21673","reseller":"UNINET-21673
","customerid":"1002A01685"}
2023-06-20T14:28:52 14290mS HTTP: 35.186.220.2(443)-(4105) HTTPSession: ClientDestroyed: failure false client 0b53c4e0 io_pm 0b530500 this 0b53afa0
2023-06-20T14:28:52 14290mS HTTP: HTTPAPNPAuthorizationSessionIO::ClientDestroyed Failure=False
2023-06-20T14:28:52 14290mS HTTP: HTTPAPNPAuthorizationSessionIO: SetState Delete
2023-06-20T14:28:52 14290mS HTTP: ~HTTPAPNPAuthorizationSessionIO
2023-06-20T14:28:52 14290mS HTTP: HTTP/HTTPS - Invoke IPAddress Blacklisting TLS never got connected for this session 35.186.220.2 server port 4105

 

[derfloh]

TLS:Certificate not in Certificate Store

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[Fred_M]

Hello,

Have you any news on this issue please ?

 

[Fr0gg3r - MaartenS]

This is indeed most likely an issue with a missing/expired root or intermediat certificate in the IP Office that is required for the TLS encryption towards the avayacloud website.

You need to upload an new valid certificate to your IP Office.

Open a browser on your pc:

​

Depending on what type of ipo:

for ip500V2: surf to

https://accounts-ipo.avayacloud.com

​

for Server Edition surf to:

https://accounts.avayacloud.com/

Open the certificate of the website, go to 'Details' and export the root and intermediate certificate.(don't export them both at once, at "save as type"select: "base64 encoded, one certificate")

Then upload both certificates to the IP Office via the security settings.

This should fix the TLS issue.

 

[Fred_M]

Hi Fr0gg3r,

Effectively, I have found this method the last week and my system works fine actually.

Thank you for your reply.

Have a nice day.